Buggy code:
public class AccessAuthorizationResourceDefinition extends SimpleResourceDefinition { public static final PathElement PATH_ELEMENT = PathElement . pathElement ( ModelDescriptionConstants . ACCESS , ModelDescriptionConstants . AUTHORIZATION ) ; public enum Provider { SIMPLE ( "simple" ) , RBAC ( "rbac" ) ; private final String toString ; private Provider ( String toString ) { } @ Override public String toString ( ) { } } public static final SimpleAttributeDefinition PERMISSION_COMBINATION_POLICY = new org . jboss . as . controller . SimpleAttributeDefinitionBuilder ( ModelDescriptionConstants . PERMISSION_COMBINATION_POLICY , ModelType . STRING , true ) . setDefaultValue ( new ModelNode ( PERMISSIVE . toString ( ) ) ) . setValidator ( new org . jboss . as . controller . operations . validation . EnumValidator < CombinationPolicy > ( CombinationPolicy . class , true , false ) ) . build ( ) ; public static final SimpleAttributeDefinition PROVIDER = new org . jboss . as . controller . SimpleAttributeDefinitionBuilder ( ModelDescriptionConstants . PROVIDER , ModelType . STRING , true ) . setDefaultValue ( new ModelNode ( AccessAuthorizationResourceDefinition . Provider . SIMPLE . toString ( ) ) ) . setValidator ( new org . jboss . as . controller . operations . validation . EnumValidator < AccessAuthorizationResourceDefinition . Provider > ( AccessAuthorizationResourceDefinition . Provider . class , true , false ) ) . build ( ) ; static final ListAttributeDefinition STANDARD_ROLE_NAMES = new org . jboss . as . controller . StringListAttributeDefinition . Builder ( ModelDescriptionConstants . STANDARD_ROLE_NAMES ) . setStorageRuntime ( ) . build ( ) ; static final ListAttributeDefinition ALL_ROLE_NAMES = new org . jboss . as . controller . StringListAttributeDefinition . Builder ( ModelDescriptionConstants . ALL_ROLE_NAMES ) . setStorageRuntime ( ) . build ( ) ; public static final List < AttributeDefinition > CONFIG_ATTRIBUTES = Arrays . < AttributeDefinition > asList ( AccessAuthorizationResourceDefinition . PROVIDER , AccessAuthorizationResourceDefinition . PERMISSION_COMBINATION_POLICY ) ; public static AccessAuthorizationResourceDefinition forDomain ( DelegatingConfigurableAuthorizer configurableAuthorizer ) { } public static AccessAuthorizationResourceDefinition forHost ( DelegatingConfigurableAuthorizer configurableAuthorizer ) { } public static AccessAuthorizationResourceDefinition forDomainServer ( DelegatingConfigurableAuthorizer configurableAuthorizer ) { } public static AccessAuthorizationResourceDefinition forStandaloneServer ( DelegatingConfigurableAuthorizer configurableAuthorizer ) { } private final DelegatingConfigurableAuthorizer configurableAuthorizer ; private final boolean isDomain ; private final boolean isHostController ; private final List < AccessConstraintDefinition > accessConstraints ; private AccessAuthorizationResourceDefinition ( DelegatingConfigurableAuthorizer configurableAuthorizer , boolean domain , boolean hostController ) { } @ Override public void registerAttributes ( ManagementResourceRegistration resourceRegistration ) { } @ Override public void registerChildren ( ManagementResourceRegistration resourceRegistration ) { if ( ! ( isHostController ) ) { <START_BUG> resourceRegistration . registerSubModel ( RoleMappingResourceDefinition . create ( configurableAuthorizer ) ) ; <END_BUG> } if ( isDomain ) { WritableAuthorizerConfiguration authorizerConfiguration = configurableAuthorizer . getWritableAuthorizerConfiguration ( ) ; resourceRegistration . registerSubModel ( new ServerGroupScopedRoleResourceDefinition ( authorizerConfiguration ) ) ; if ( ! ( isHostController ) ) { resourceRegistration . registerSubModel ( new HostScopedRolesResourceDefinition ( authorizerConfiguration ) ) ; } } if ( ! ( isHostController ) ) { resourceRegistration . registerSubModel ( INSTANCE ) ; resourceRegistration . registerSubModel ( SensitivityClassificationParentResourceDefinition . INSTANCE ) ; resourceRegistration . registerSubModel ( SensitivityResourceDefinition . createVaultExpressionConfiguration ( ) ) ; } } @ Override public void registerOperations ( ManagementResourceRegistration resourceRegistration ) { } @ Override public List < AccessConstraintDefinition > getAccessConstraints ( ) { } public static Resource createResource ( AccessConstraintUtilizationRegistry registry ) { } }

Fix:
resourceRegistration . registerSubModel ( RoleMappingResourceDefinition . create ( configurableAuthorizer , isDomain ) ) ;